(U) Why We Care 



(TS//SI//REL TO USA, FVEY) 



S2 - many of our targets 
communicate over Huawei produced 
products 

(TS//SI//REL TO USA, FVEY) S3 - design, deployment & 

market expansion impact access to 
communications . 



(S//SI//RELTO USA, FVEY) I 



From NIE, The Global Cyber Threat to the US 
Information Infrastructure: "We assess with high 
confidence that the increasing role of international 
companies and foreign individuals in US information 
technology supply chains and services will increase 
the potential for persistent, stealthy subversions." 



I have kind of been hinting at this all along, but why do we care? 

Many of our targets communicate over Huawei produced products, we want to make sure that we know how to exploit these products - we also want to 
ensure that we retain access to these communication lines, etc. There is also concern that Huawei's widespread infrastructure will provide the PRC with 
SIGINT capabilities and enable them to perform denial of service type attacks. This was all stated in the National Intelligence Estimate that came out a 
few months ago: "the increasing role of international companies and foreign individuals in US information technology supply chains and services will 
increase the potential for persistent, stealthy subversions." 



So bo r-ecap.. fchte is whaft we are hoping Id- acpwrpish: 
TSWSUiREL) Delefmine if Huawei is doing SIGINTfor PRC 

iTSW'&ltfREL) Perform mote analysis on Huawei turp - define relationships, ocgankzation, plans, elc. 

|T£tf£-ltfREL) Dired efforts a gains! rrtelig«!sce gaps - IRM deciypls, underwaler iber RAD facing, follow the money, supply chain, efc 
CTStfSlffREL) Fooj* on high prifrlv targds - Iran, Alfchaflistarv Pafcislaiv Kenya, Cuba. 
iTSWSIffREL) Leverage Huawei presence to- gain access lo networks of interest 
iTSiVSI.'/RELj Documenl processes to be used later for targeting othef non-par&iefa.ble companies. 
How is success defined^ jbmefcne 6-3 monfllts-) 

Obtaining adbonafct irilell^ encecf HuftweP* land pofeAbally PRC*) leadership plans and in1*m<ons 

Enable 5IGINT coHechwi through CNE lools 

So what are we going 1o do about I? The fcr3 slep was to focn a TOPI, so thai we can start Id report scene of our indngs and continue (asking the communicalions. However, targeting Huawei is a big, messy task. In order to 
help us focus, we broke Huawei into three pilfers: The Company, The Technology. The Deployment of 1he Technology. 

V/hen we look at these three ditierent aspects of Huawei we found that two lopics showed up across the board - maifcefling and plansflnflenrtions. So thai is our main focus. If we can see how huawei is marketing tsell, and 
working fco standi thu will hefc us lc i*nd*f aland (he cwipanys plans .and rontons if we cm determine (he company* plans and mienliofts. we hop* lhafl ihu wii lead us back to plans and ■menhon* op the PRC, 



We will consider ourselves a success if we 

Obtaining adi enable ml elhgence o1 Huawei s ^and potentially Pfitsj leadershp plans and inlenhons 
Fnahifr si sin r tuiiecbon ihrorgh CMS I wis 



